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REMARKS 

The Office Action of May 23, 2006 has been received and carefully considered. 
All claims are now present for examination and favorable reconsideration is respectfully 
requested in view of the following comments. 

REJECTIONS UNDER 35 U.S.C. § 102 : 

Claims 1, 3 and 5 have been rejected under 35 U.S.C. § 102 (b) as allegedly being 
anticipated by Schneier (Bruce Schneier, Applied Cryptography, 1996, John Wiley & 
Sons). The Examiner indicated that "The right half of the data is expanded to 48 bits via 
an expansion permutation, combined with 48 bits of a shifted and permuted key via an 
Xor However, having carefully reviewed the Office Action and analyzed the 

description of algorithm DES in Schneier in detail, Applicant respectfully submits that, 
Schneier, when describing algorithm DES, does not disclose any feature of converting a 
subkey depending on data being converted. The Examiner has incorrectly interpreted the 
conversion operation / appeared on page 270 and in Fig. 12.1 as an operation of 
permuting bits of subkey K/. In fact, the conversion operation / is not a permutation 
operation. This is supported by the following evidence. 

The number of unit bits in a binary vector produced as a result of combined 
conversion of subkey Kj and data subblock Ro (page 270 and Fig. 12.1) is typically not 
equal to the number of unit and zero bits in either subkey K/ or in data subblock Ro. 
However, as a result of performing the operation of bit permutation, the number of unit 
bits in the output binary vector is always equal to the number of unit bits in the input 
binary vector. This is because, in performing the operation of permutation, the bits are 
permuted but not inverted. Only with a very small probability, as a result of performing 
the conversion operation /, may the number of unit bits at the output by chance coincide 
with the number of unit bits in subkey K/ or in data subblock R 0 . The fact that the 
conversion operation / is not an operation of permutation, is also supported by B. 
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Schneier, A. Menezes (see Menezes A.J., Vanstone S.A., Handbook of Applied 
Cryptography, CRC Press, 1996. 780p.) and J. Buchmann (Buchmann J. Introduction to 
Cryptography, Springer- Verlag, New York, Berlin, 2004. 335p.) Thus, the conversion 
operation / is not an operation of bit permutation and, hence, is not an operation of bit 
permutation performed depending on the data subblock being converted. Therefore, 
algorithm DES does not anticipate the claimed method of block encryption. 

It is respectfully submitted that the interpretation of the conversion operation /as 
provided by Applicant in the previous response to the office action is correct and 
corresponds to the description in Schneier. Schneier clearly does not stress that the 
conversion operation / consists in performing several consecutive elementary operations. 
In Fig. 12.1, Schneier presents a general scheme of conversions of algorithm DES as a 
sequence of performing sixteen typical conversion rounds and designates one conversion 
round as the conversion operation / Then, in Fig. 12.2, Schneier discloses elementary 
operations constituting each round. Schneier detailed elementary operations constituting 
the conversion operation fin the sections immediately following page 270 and Fig. 12.1. 
These sections are "The Expansion Permutation" (page 273), "The S-Box Substitution" 
(pages 274-275), "The P-Box Permutation" (pages 275-277). Because these sections 
immediately follow the description of the general scheme of the make-up of algorithm, 
Schneier clearly did not indicate that these sections described consecutive elementary 
operations, which specify the conversion operation / Apparently, this circumstance 
misled the Examiner. The fact that the conversion operation / in algorithm DES is a 
composite operation and includes a sequence of elementary conversion operations, 
follows from the description of DES provide also in the widely known document - 
Menezes (see Menezes A.J., Vanstone S.A., Handbook of Applied Cryptography, CRC 
Press, 1996. 780p.), on page 255 (Figs. 7.10)(copy enclosed). The document Menezes 
clearly discloses that peforming the conversion operation /is a sequence of the following 
elementary operations: i) subblock Ri-i expansion operation (e.g. of subblock R 0 ), ii) 
modulo 2 bit-by-bit summation operation performed on an expanded data subblock and 
subkey Ki (e.g. subkey Kj), iii) substitution operation performed on the result obtained at 
the output of the preceding operation, and iv) fixed bit permutation operation. Here, the 
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fixed bit permutation operation does not depend on any data subblock being converted. 
The same fixed bit permutation is performed for all possible input data in a given round 
when performing the operation / at step iv). The document J. Buchmann (Buchmann J. 
Introduction to Cryptography, Springer- Verlag, New York, Berlin, 2004. 335p.) also 
indicates that the conversion step operation / used in algorithm DES consists of the above 
elementary operations i), ii), iii) and iv), on page 131 (copy enclosed). Therefore, the 
conversion operation / is not a bit permutation operation and does not include any bit 
permutation operation dependent on a data subblock. Accordingly, algorithm DES does 
not anticipate the claimed invention. 

In addition, although page 270 of Schneier indicates that "The right half of the 
data is expanded to 48 bits via an expansion permutation, combined with 48 bits of a 
shifted and permuted key via an Xor .. .", one of ordinary skill in the art cannot conclude 
from this reference that a bit permutation operation was previously the subkey depending 
on some data subblock being converted. On page 272 and in section "The Key 
Transformation", Schneier discloses, what bit permutation operation was performed on 
the subkey: "First, the 56-bit key is divided into two 28-bit halves. Then, the halves are 
circularly shifted left by either or two bits, depending on the round." Thus, in algorithm 
DES, the bit permutation operation is performed on the key by depending on the 
number of the round, but not on the data subblock, i.e. the feature of performing 
the subkey bit permutation operation depending on the data subblock being 
converted , that is presented in the claimed invention. Furthermore, the newly presented 
Claim 5 include additional feature of value of another subkey, which is not disclosed or 
suggested in prior art, including Schneier. 

Therefore, the newly presented claim is not anticipated by Schneier and the 
rejection under 35 U.S.C. § 102 (b) has been overcome. Accordingly, withdrawal of the 
rejection under 35 U.S.C. § 102 (b) is respectfully requested. 
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Having overcome all outstanding grounds of rejection, the application is now in 
condition for allowance, and prompt action toward that end is respectfully solicited. 

Respectfully submitted, 
JACOBSON HOLMAN PLLC 



Date: August 22, 2006 
(202) 638-6666 
400 Seventh Street, N.W. 
Washington, D.C. 20004 
Atty. Dkt. No.: P65855US0 

Enclosures: 

1. Copy of Page 255 of Menezes A. J., Vanstone S.A., Handbook of Applied 
Cryptography, CRC Press, 1996. 780pp. 

2. Copy of Page 131 of Buchmann J. Introduction to Cryptography, Springer- 
Verlag, New York, Berlin, 2004. 335pp. 
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Figure 7.10: DES inner function f. 



7 83 Algorithm DES key schedule 

INPUT: 64-blikcy K = *i • • • (including H otld-pari.y bhs) 

OUTPUT: sixteen 48-bit keys Jfc. 1 < i < 1<>- otherwise. 
. Define tn 1< i < 1 6 as follo ws: «. = 1 fo " 6 . t 1 '*' 9 ' «* 

at^eK-^ ^Tab^.oseled 
2 T <- PCI (JO; icprcseni T as 2*-b.ihalvcs (Co, , V 
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If decrypts U desieneda, «sirr.p.c v*taUo» o^hoe^pUc- ru^on^avingsr^ult 
,„ hardwareor sofU-are code «lze. DES achieves this as ou.hr.ed ,n Note 7.84. 

T.84 Note t^<0^»>^^ 

key bu> reversed ^^»^|; n ^^ ^-. ^Ued by IP in decryp- 

^ p - r^.^ffRis.Kifi), is equal lo Lis©/ (#l5,*i6)©-f ^is,^i6; « 
and Ri6 - Xas©AWt «i inveitin g roU nd 16. Note that ihe cancellation 

round 1 decrypuon yields (ftis, l>\$h i e - "nverong 
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FIGURE 5.1 The /-function of DES. 



is computed with B, € {0, l} 6 . 1 < i < 8. In the next step, functions 

5i:{0.1} fi -> {0,1} 4 , l<i<8 
are used (the so-called S-boxes). They are described below. Using 
those functions, thfi string 

C = C1C2C3C4C5C6C7Q 

te determined, where d = 1 _ ' _ »• " has length 32. The 

germination P from Table 5.3 is applied to this string. The result is 

kin 

5.2.4 S-tooxes 

- c ursw* <l i < i < 8 They are the heart of DES 
jejow we describe the S-boxes S,. 1 < 1 _o.it ^ 

because they are highly nonlinear (see Exercise d.5.6). They are 
Wn in ible S 4 Each S-box is represented by a table with four 
foZln* Te columns. For each string B = >,b**M.. vatae 
5 computed as Follows. The integer with binary expansion ^ 
S used as the row index. The integer with binary expansion fefcM* 
Is used as the column index. The entry of the S-box in this tow and 
Xvn * written in binary expansion. This expansion is padded 
wT* leading zeros such that its length is four. The result is 



